Lead Penetration Tester & Source Code Review Expert

Vouch Recruitment Pte Ltd; Singapore; On-site; SGD 65,000 - 110,000; Full time

Job summary

Vouch Recruitment Pte Ltd is seeking an experienced Penetration Tester with strong source code review expertise for a Singapore-based role. The ideal candidate will conduct hands-on testing across web, network, mobile, IoT, thick-client and cloud environments while leading and mentoring the team.

You will identify vulnerabilities, perform code reviews, and produce detailed reports with mitigations to strengthen security posture. Certifications such as CREST or OSCP are desirable.

Qualifications

• 1–2 years hands-on penetration testing across multiple domains.
• Proven experience performing and leading source code reviews.
• Knowledge of secure coding practices and vulnerabilities.
• Strong report writing and the ability to explain technical issues to stakeholders.

Responsibilities

• Perform detailed source code reviews to identify security vulnerabilities.
• Act as the domain expert in source code analysis.
• Perform hands-on penetration testing across web, network, mobile, thick-client, IoT and cloud domains.
• Identify, exploit, and document security vulnerabilities.
• Create comprehensive reports with findings and mitigations.
• Collaborate with team members to share knowledge and improve testing methods.
• Conduct security assessments and audits of systems, applications and networks.
• Stay updated on latest security trends and technologies.

Skills

Penetration testing

Source code review

Security testing

Report writing

Job description

Vouch Recruitment Pte Ltd is seeking an experienced Penetration Tester with strong source code review expertise for a Singapore-based role. The ideal candidate will conduct hands-on testing across web, network, mobile, IoT, thick-client and cloud environments while leading and mentoring the team.

You will identify vulnerabilities, perform code reviews, and produce detailed reports with mitigations to strengthen security posture. Certifications such as CREST or OSCP are desirable.